Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: Aeh0d6pK3UGFr833KRA4jyAlr661z02bwn2kmDpUn1k=
Subject key identifier: 42:F0:98:07:49:2A:03:67:A3:F0:98:61:36:B4:AB:AA:E9:48:EC:29
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 019F93FFC1C527A999C038F4E5E60C6B0B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 1097
Signing time: Fri 24 Jul 2026 12:00:39 +0000
Manifest this update: Fri 24 Jul 2026 12:00:39 +0000
Manifest next update: Sat 25 Jul 2026 12:00:39 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: 8TV5ytHmh9NsyUGS2BhE6YWIV0yhpLAlG2wbbvZgmKA=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c1:c5:27:a9:99:c0:38:f4:e5:e6:0c:6b:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Jul 24 12:00:39 2026 GMT
Not After : Jul 25 12:00:39 2026 GMT
Subject: CN=42f09807492a0367a3f0986136b4abaae948ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:f1:c7:5a:d3:24:9c:89:63:ee:5f:de:bd:
b4:25:43:5f:58:01:c0:9a:77:8e:25:41:8f:c9:31:
6e:d8:3c:3a:bf:0d:73:91:d0:76:dc:51:42:7b:ad:
4e:02:d4:a2:a1:99:d7:b7:18:d8:31:39:52:e3:8a:
59:16:4c:7a:62:d9:8d:97:e5:93:14:33:31:b3:a1:
f3:22:28:23:e6:6a:8f:e9:b8:91:f8:f7:dc:0b:4e:
cc:98:50:f2:8c:e6:eb:05:7b:fc:fd:e5:58:9a:ed:
2f:52:20:c5:14:b3:e2:7f:62:e5:a9:7d:01:42:5b:
5d:2c:8e:af:c3:97:ce:4b:de:cb:b5:3f:40:a9:7f:
d7:db:71:23:dd:52:25:bd:e0:7e:45:42:99:4d:77:
a5:55:32:01:82:84:f9:f3:58:c7:68:31:d0:f6:35:
3f:a6:75:19:eb:ac:ac:c6:e5:9e:16:8d:58:49:95:
22:e7:b7:21:93:ab:2a:34:ed:79:8b:02:d5:46:40:
71:3d:36:4b:85:7a:de:15:a6:9d:ca:e1:33:20:a5:
cc:20:51:ea:1b:34:5d:e9:d2:cd:e8:00:03:26:bf:
5e:ed:0c:6b:11:b9:6c:81:be:f5:23:dc:3c:1f:d7:
a4:f6:f5:8f:27:5f:bd:1d:39:5d:2c:61:46:93:ff:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:98:07:49:2A:03:67:A3:F0:98:61:36:B4:AB:AA:E9:48:EC:29
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ed:9f:b5:11:d8:12:c2:f5:af:04:e4:55:f5:97:01:02:2f:
9b:b0:ed:f3:58:e7:09:62:ce:58:69:30:94:cb:7a:39:56:e6:
db:8a:d3:34:54:bc:3a:c4:2c:a6:83:04:f6:80:71:95:39:42:
c9:f1:30:58:51:03:af:3c:36:d7:cb:67:d7:aa:ce:da:62:14:
1e:5e:85:37:50:48:ef:8a:f9:1f:ce:63:7a:23:69:92:b0:40:
72:66:af:7e:b4:88:e4:2a:9d:c6:74:9f:16:1c:43:f9:b7:8a:
dd:ec:09:5c:50:99:c1:d0:8c:b6:64:f0:28:77:94:10:c0:73:
0b:3e:9f:5d:87:ff:5e:00:57:73:9c:86:63:b8:db:88:2b:0d:
f9:5c:0f:f8:01:09:2e:67:46:b0:be:2e:13:18:db:a1:bf:c3:
4c:c7:6a:8a:20:6f:c4:f7:be:b9:ea:75:04:38:ef:ef:cc:fc:
1e:37:79:45:ba:59:13:89:37:03:bd:6c:ec:30:e9:71:da:d1:
fa:13:f5:cb:e4:77:c5:30:3e:55:79:2e:de:ed:a2:e3:01:58:
85:e2:8e:97:50:a0:8d:3b:d5:f5:bc:4a:60:8b:21:40:54:78:
8c:c5:df:f9:7d:db:06:19:71:bc:b8:05:ac:54:e2:4f:b1:af:
65:be:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:43 2026 by rpki-client